VTech Kid Connect - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application VTech Kid Connect published at the 'play' market has multiple vulnerabilities...

VTech Kid Connect (Deutsch) - Customized SSL, MIT license, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application VTech Kid Connect Deutsch published at the 'play' market has multiple vulnerabilities...

GummyBearIntl online for kid - Dynamic Code Loading, External URLs, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application GummyBearIntl online for kid published at the 'play' market has multiple vulnerabilities...

Information disclosure

The Hundred Thousands Kid Book aka it.tinytap.attsa.thousands application 1.6.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5763

The Kid Mode: Free Games + Lock aka com.zoodles.kidmode application 4.9.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Code injection

The Kid Mode: Free Games + Lock aka com.zoodles.kidmode application 4.9.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5763

CVE-2014-5763 affects the Android app “The Kid Mode: Free Games + Lock” (com.zoodles.kidmode), version 4.9.8. The root cause is that the app does not verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and access sensitive information...

littlephpcms multiple injection/upload/sensitive information leakage issues-vulnerability warning-the black bar safety net

Document classification: script Defense/web apps Published time: 2011-9-30 9:2 6:0 5 Vulnerability added: black kid|attention7 1 Station search: littlephpcms multiple injection/upload/sensitive information leakage issue Vulnerability neighbor: DeDeCMSweaving dreamsvariable overwrite 0day getshell...

Unfixed XSS vulnerability at www.jogjahacking.org

Security researcher SPYRO KiD, has submitted on 05/06/2009 a cross-site-scripting XSS vulnerability affecting www.jogjahacking.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is...

Unfixed XSS vulnerability at sms.unikom.ac.id

Security researcher SPYRO KiD, has submitted on 28/03/2009 a cross-site-scripting XSS vulnerability affecting sms.unikom.ac.id, which at the time of submission ranked 162692 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at www.atk.ac.id

Security researcher SPYRO KiD, has submitted on 27/03/2009 a cross-site-scripting XSS vulnerability affecting www.atk.ac.id, which at the time of submission ranked 1165578 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

PT-2009-1550 · Bahar · Bahar Download Script

Name of the Vulnerable Software and Affected Versions: Bahar Download Script version 2.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the kid parameter in the aspkat.asp file. Recommendations: For Bahar Download Script version 2.0, conside...

Sql injection

SQL injection vulnerability in kategori.asp in Pcshey Portal allows remote attackers to execute arbitrary SQL commands via the kid parameter...

eXV2 Module Viso 2.0.4.3 - kid SQL Injection

eXV2 Module Viso 2.0.4.3 - kid SQL Injection Powered by eXV2 Viso 2.03 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORKS 1 : allinurl :"modules/viso" EXPLOIT 1 :...

PT-2008-2812 · Kutubisitte · Kutub-I Sitte

Name of the Vulnerable Software and Affected Versions: Kutub-i Sitte KutubiSitte version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the kid parameter in a hadisgoster action to modules.php. Recommendations: For Kutub-i Sitt...